github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-29 19:23:16 +00:00
Code Issues Projects Releases Wiki Activity

cleanup(config): modern bpf is no more experimental

Browse Source 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
Andrea Terzolo 2023-05-08 23:33:23 +02:00 committed by poiana
parent f5c7574eba
commit e83dbe85f7
2 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
falco.yaml
View File

@ -232,9 +232,8 @@ syscall_drop_failed_exit: false
syscall_buf_size_preset: 4 syscall_buf_size_preset: 4
############## [EXPERIMENTAL] Modern BPF probe specific ############## ############## Modern BPF probe specific ##############
# Please note: these configs regard only the modern BPF probe. They # Please note: these configs regard only the modern BPF probe.
# are experimental so they could change over releases.
# #
# `cpus_for_each_syscall_buffer` # `cpus_for_each_syscall_buffer`
# #
@ -297,7 +296,7 @@ syscall_buf_size_preset: 4
modern_bpf: modern_bpf:
cpus_for_each_syscall_buffer: 2 cpus_for_each_syscall_buffer: 2
############## [EXPERIMENTAL] Modern BPF probe specific ############## ############## Modern BPF probe specific ##############
# Falco continuously monitors outputs performance. When an output channel does not allow # Falco continuously monitors outputs performance. When an output channel does not allow
# to deliver an alert within a given deadline, an error is reported indicating # to deliver an alert within a given deadline, an error is reported indicating

2
userspace/falco/app/options.cpp
View File

@ -180,7 +180,7 @@ void options::define(cxxopts::Options& opts)
("gvisor-root", "gVisor root directory for storage of container state. Equivalent to runsc --root flag.", cxxopts::value(gvisor_root), "<gvisor_root>") ("gvisor-root", "gVisor root directory for storage of container state. Equivalent to runsc --root flag.", cxxopts::value(gvisor_root), "<gvisor_root>")
#endif #endif
#ifdef HAS_MODERN_BPF #ifdef HAS_MODERN_BPF
("modern-bpf", "[EXPERIMENTAL] Use BPF modern probe to capture system events.", cxxopts::value(modern_bpf)->default_value("false")) ("modern-bpf", "Use BPF modern probe to capture system events.", cxxopts::value(modern_bpf)->default_value("false"))
#endif #endif
("i", "Print all high volume syscalls that are ignored by default for performance reasons (i.e. without the -A flag) and exit.", cxxopts::value(print_ignored_events)->default_value("false")) ("i", "Print all high volume syscalls that are ignored by default for performance reasons (i.e. without the -A flag) and exit.", cxxopts::value(print_ignored_events)->default_value("false"))
#ifndef MINIMAL_BUILD #ifndef MINIMAL_BUILD